CVE-2018-1999038

4.2MEDIUM

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specifi

Опубликовано: 8/1/2018Обновлено: 11/21/2024
Посмотреть на NVDПосмотреть на MITRE

Описание

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.

ИИ-АнализНа базе ИИ

Затронутые продукты

jenkinspublish_over_cifs

Ссылки